CVE-2015-2281 – Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign

Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attackers to execute arbitrary code via a large PROCESS_HELLO message to the Message Dispatcher on TCP port 8000.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2281

Reference (s):

• BID:73206
• URL: http://www.securityfocus.com/bid/73206
• BUGTRAQ:20150318 [CORE-2015-0006] – Fortinet Single Sign On Stack Overflow
• URL: http://www.securityfocus.com/archive/1/534918/100/0/threaded
• http://www.fortiguard.com/advisory/2015-02-27-fsso-stack-based-buffer-overflow